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I.  INTRODUCTION 


A.  BACKGROUND 

The  federal  government  spends  billions  of  dollars  on  information  teehnology  (IT) 
projeets  each  year.  Investing  in  the  federal  government  IT  infrastructure  is  crucial  to  the 
efficient  operation  of  federal  programs  and  in  many  cases  to  our  national  security  (S.  Hrg, 
110-409).  Despite  spending  billions  on  IT,  the  government  has  achieved  little  of  the 
productivity  improvements  that  private  industry  has  realized  from  IT.  Too  often,  federal 
IT  projects  run  over  budget,  behind  schedule,  or  fail  to  deliver  promised  functionality 
(Kundra,  2010).  The  March  2009  Defense  Science  Board  concluded  that  three  root  causes 
emerged  from  a  review  of  major  IT  acquisition  programs  where  cost,  schedule,  and 
performance  were  issues.  First,  senior  leaders  lacked  experience  and  understanding. 
Second,  the  program  executive  officers  and  program  managers  had  inadequate 
experience.  Third,  the  acquisition  process  was  bureaucratic  and  cumbersome,  where 
many  who  were  not  accountable  had  to  say  “yes”  before  authority  to  proceed  was 
granted.  Among  these  problems,  lack  of  experience  dominated  (OUSD[AT&L],  2009). 

To  address  these  concerns,  the  U.S.  CIO  (Chief  Information  Officer),  the  Office 
of  Personnel  Management  (0PM),  and  the  Office  of  Management  and  Budget  (0MB) 
launched  several  initiatives  intended  to  improve  the  oversight  and  management  of 
IT  acquisitions.  The  first  initiative  came  in  2010  when  the  White  House  introduced  the 
25  Point  Implementation  Plan  to  Reform  Federal  Information  Technology  Management. 
One  main  topic  of  discussion  focused  on  strengthening  program  management  by 
designing  a  formal  IT  Program  Management  career  path.  In  2011,  0PM  created  a 
separate  specialized  job  title,  the  IT  program  manager  (PM),  and  published  the  IT 
Program  Management  Career  Path  Guide.  In  addition  to  these  efforts,  the  DOD  CIO 
published  the  IT  Acquisition  Workforce  Strategic  Plan  in  2012.  This  plan  focused  on  a 
wide-range  of  activities  necessary  to  create  a  management  structure  to  strengthen  and 
grow  a  recognized  cadre  of  IT  PMs. 
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B, 


PURPOSE 


This  research  analyzes  the  need  for  IT  PM  positions  within  the  federal 
government  by  comparing  the  differences  of  IT  PMs  and  non-IT  PMs.  The  government 
continues  to  spend  billions  on  IT  each  year.  Does  having  experienced  IT  PMs  ensure 
programs  are  delivered  on  time,  within  budget,  and  with  the  promised  capabilities? 
Likewise,  can  a  non-IT  PM  ensure  program  success? 

C.  RESEARCH  QUESTIONS 

The  primary  research  question  is:  “What  are  the  fundamental  similarities  and 
differences  between  IT  PMs  and  non-IT  PMs?”  The  subsidiary  research  questions  are: 

•  What  is  the  history  of  IT  Program  Management? 

•  What  are  the  required  competencies  of  an  IT  PM? 

•  What  are  the  sources  of  education  and  training  for  an  IT  PM? 

D.  METHODOLOGY 

This  project  uses  the  following  methodology: 

•  A  literature  search  via  the  Internet,  private  and  government  databases, 
books  and  journals  available  in  the  Naval  Postgraduate  School  Dudley 
Knox  Library,  and  other  available  sources  of  relevant  information. 

•  Additional,  new,  or  follow-up  interviews  and  questions  via  phone  or 
email. 

E.  ORGANIZATION 

This  study  is  organized  into  five  chapters.  Chapter  I  presents  an  overview  of  the 
challenges  the  federal  government  has  had  with  managing  information  technology 
projects.  Chapter  II  discusses  the  general  background  of  IT  Program  Management 
including  the  supporting  policies  and  regulations.  Chapter  III  reviews  the  competencies 
and  certifications  of  IT  PMs  compared  to  non-IT  PMs.  Chapter  III  also  reviews  the  DOD 
Directives  and  Instructions  that  apply  to  IT  PMs.  Chapter  IV  draws  conclusions  from 

similarities  and  differences  between  IT  and  non-IT  PMs.  Chapter  V  suggests 
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recommendations  for  future  research  on  Defense  Acquisition  University  (DAU)  and 
Federal  Acquisition  Institute  (FAI)  courses  that  provide  training  on  developing  the 
general  competencies  of  IT  PMs. 


3 


THIS  PAGE  INTENTIONALLY  LEET  BLANK 


4 


II.  BACKGROUND  OF  INORMATION  TECHNOLOGY 
PROGRAM  MANAGEMENT 

A,  CLINGER-COHEN  ACT 

The  Clinger-Cohen  Act  (CCA)  was  enacted  by  Congress  on  February  10,  1996  to 
reform  and  improve  the  way  federal  agencies  acquire  and  manage  IT  resources  (OIG, 
2000).  This  act  may  be  cited  as  the  National  Defense  Authorization  Act  of  Fiscal  Year 
1996.  The  CCA  is  comprised  of  two  acts:  the  Information  Technology  Management 
Reform  Act  (ITMRA)  (Division  E)  and  the  Federal  Acquisition  Reform  Act  (FARA) 
(Division  D).  The  ITMRA  and  FARA  were  renamed  the  Clinger-Cohen  Act  for  its  co¬ 
sponsors:  Rep.  William  Clinger,  R-PA,  and  Senator  William  Cohen,  R-ME 
(www.govexec.com).  This  act  is  significant  because,  for  the  first  time  in  law,  it 
established  the  position  of  Chief  Information  Officer  (CIO)  in  major  departments  and 
agencies  within  the  federal  government.  The  CIO  plays  a  critical  leadership  role  in 
driving  reforms  to  (1)  help  control  system  development  risks;  (2)  better  manage 
technology  spending;  and  (3)  succeed  in  achieving  real,  measurable  improvements  in 
agency  performance  (OIG,  2000).  “CIOs  are  to  monitor  the  performance  of  IT  programs, 
evaluate  the  performance  of  those  programs,  and  advise  agency  heads  on  continuing, 
modifying  or  terminating  the  programs  or  projects”  (U.S.  House,  1996,  p.  2). 

The  DOD  CIO  is  the  principle  staff  assistant  and  advisor  to  the  Secretary  of 
Defense  for  IT.  This  includes  the  national  security  systems,  defense  business  systems, 
and  information  resource  management  (IRM)  matters.  The  DOD  CIO  is  responsible  for 
all  matters  relating  to  the  DOD  information  enterprise  including:  communications, 
spectrum  management,  network  operations,  information  systems,  cybersecurity,  position, 
navigation,  timing  (PNT)  policy,  and  the  DOD  information  enterprise  that  supports  DOD 
command  and  control  (DODD  5144.2,  2013). 

Prom  an  acquisition  perspective,  the  DOD  CIO  will  develop  and  maintain,  in 
coordination  with  the  Under  Secretary  of  Defense  for  Acquisition,  Technology,  and 
Eogistics  (USD  (AT&E)),  a  process  for  maximizing  the  value  of  and  assessing 

and  managing  the  risks  related  to  DOD  IT  acquisitions.  This  process  will  allow  the  CIO 
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to  (1)  be  integrated  with  other  key  DOD  deeision  support  systems  and  proeesses  that 
support  eapability  identifieation,  planning,  programming,  budgeting,  and  execution 
(PPBE)  and  acquisitions;  (2)  provide  for  analyzing,  selecting,  monitoring,  and  evaluating 
DOD  IT  investments;  and  (3)  be  performance-  and  results-based.  The  CIO  also  provides 
advice  on  issues  related  to  all  assigned  responsibilities  and  functions  of  the  Defense 
Acquisition  Board  (DAB),  the  Joint  Requirements  Oversight  Council,  and  the  Joint 
Capabilities  Integration  and  Development  System  process  (DODD  5144.2,  2013). 

B,  THE  25-POINT  IMPLEMENTATION  PLAN  TO  REFORM  FEDERAL  IT 

MANAGEMENT 

On  December  9,  2010,  the  Federal  CIO,  Vivek  Kundra,  introduced  the 
implementation  plan  to  reform  federal  IT  management.  This  plan  detailed  the  25  steps 
federal  agencies  must  take  to  better  manage  large-scale  IT  programs  and  improve 
program  acquisition,  management,  budgeting,  governance  and  accountability;  and 
to  migrate  to  cloud  solutions  when  possible  (www.fdcciconnect.com).  Section  B  of  the 
25  point  implementation  plan  focuses  on  strengthening  program  management  within  the 
federal  government.  A  shortage  of  qualified  personnel  creates  challenges  with  program 
management  across  the  federal  government.  Effectively  managing  modular  IT  programs 
requires  a  corps  of  program  and  project  management  professionals  with  extensive 
experience  and  robust  training.  Strong  program  management  professionals  are  essential 
to  effectively  steward  programs  from  beginning  to  end,  manage  the  tension  between  on- 
time  deliveries,  and  escalate  issues  for  rapid  resolution  before  they  become  roadblocks 
(Kundra,  2010). 

0PM  has  taken  steps  to  improve  the  IT  Program  Management  talent  in  the  federal 
government.  These  steps  include  creating  a  career  path  to  attract  and  reward  top 
performers,  establishing  integrated,  multi-disciplinary  program  teams  with  key  skills 
before  beginning  major  IT  programs,  requiring  managers  to  share  best  practices  at  the 
close  of  each  program,  launching  a  technology  fellows  program,  and  encouraging 
mobility  of  program  managers  across  the  government  (Kundra,  2010).  Along  with 
creating  a  specialized  career  path  for  IT  PMs,  a  separate  Occupational  Series  specific  to 
IT  Program  Management  would  need  to  be  established.  The  development  of  a 
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competency  model  for  IT  Program  Management  would  also  be  required.  0PM  worked 
with  the  Department  of  Treasury  and  the  Department  of  Agriculture  (USD A)  to  pilot  the 
IT  Program  Management  career  track.  After  piloting  the  career  paths  at  Treasury  and 
USD  A,  0PM  plans  to  expand  the  career  paths  more  broadly  across  the  federal 
government  (Kundra,  2010). 

C.  IT  PROGRAM  MANAGEMENT  CAREER  PATH  GUIDE 

In  November  2011,  the  U.S.  Office  of  Personnel  Management  (0PM),  in 
collaboration  with  the  Office  of  Management  and  Budget  (0MB),  developed  the 
IT  Program  Management  Career  Path  Guide  in  support  of  the  U.S.  CIO  25  Point 
Implementation  Plan  to  Reform  Federal  Information  Technology  Management.  The 
career  path  guide  was  developed  to  provide  guidance  to  federal  agencies  interested  in 
creating  or  enhancing  their  own  IT  Program  Management  career  path  (0PM,  201  Ib).  The 
career  path  guide  was  based  on  the  IT  Program  Management  Competency  Model 
established  by  0PM  in  July  2011.  It  focuses  on  general  and  technical  competencies 
pertinent  to  the  IT  Program  Management  career  field  (0PM,  2011b).  This  guide  also 
provides  a  career  progression  plan  for  employees  to  move  among  and  across  jobs  in 
Federal  IT  Program  Management;  presents  a  number  of  success  factors  enabling 
individuals  to  maximize  Federal  IT  Program  Management  performance  and  career 
advancement.  This  guide  identifies  key  work  behaviors,  training  options,  developmental 
opportunities,  and  lists  common  degrees  and  certifications  completed  by  IT  PMs  in  the 
federal  sector. 

The  IT  Program  Management  Career  Path  Guide  discusses  the  three  job  titles 
within  the  Job  Family  Standard  for  the  Information  Technology  Management  Series  GS- 
2210.  The  three  basic  titles  include  IT  Specialist,  IT  Project  Manager,  and  IT  Program 
Manager.  The  IT  specialist  does  work  that  involves  developing,  delivering,  and 
supporting  IT  systems  (0PM,  201  la).  The  IT  project  manager  manages  IT  projects  to 
provide  a  unique  service  or  product.  The  essential  distinction  between  IT  projects  and 
other  projects  is  that  an  IT  project  involves  the  delivery  of  an  IT  product,  service,  or 
system  (0PM,  2011a).  The  IT  PM  oversees  one  or  more  major  multi-year  IT  initiatives  of 
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such  magnitude  that  they  must  be  carried  out  through  multiple-related  IT  projects. 
The  IT  PM  leads,  eoordinates,  eommunieates,  integrates,  and  assumes  responsibility  for 
the  overall  suceess  of  the  program,  ensuring  alignment  with  eritical  ageney  priorities.  IT 
PMs  are  responsible  for  ensuring  the  work  efforts  aehieve  the  outeome  specified  within 
the  ageney’ s  business  strategy,  including  appropriate  strategie,  life  eyele  management 
and  eapital  IT  investment  plans.  Work  also  ineludes  projeet  seleetion,  prioritization, 
evaluation  and  monitoring,  eost  sehedule  management,  risk  management,  quality 
management,  and  resouree  alloeations  (0PM,  2011a). 

Projeets  have  a  defined  beginning  and  end  while  a  program  eonstitutes  an  ongoing 
operation.  This  is  a  key  distinction  between  the  two.  A  projeet  serves  to  develop,  modify, 
or  enhanee  a  product,  service,  or  system  and  is  eonstrained  by  the  relationships  among 
seope,  resourees,  and  time.  A  program  eneompasses  the  missions,  funetions,  operations, 
aetivities,  laws,  rules,  and  regulations  that  an  ageney  is  authorized  and  funded  by  statute 
to  administer  and  enforee.  Additionally,  a  program  provides  produets  and/or  serviees  to 
the  publie,  and  ageneies  distribute  available  funding  and  provide  ongoing  staff  support  to 
earry  out  a  continuing  program  (0PM,  2011a). 

D,  INFORMATION  TECHNOLOGY  ACQUISITION  WORKFORCE 

The  IT  Aequisition  Workforee  Strategic  Plan  is  a  plan  that  the  Department  of 
Defense  (DOD)  CIO  developed  to  implement  near  term  initiatives  and  to  plan  for  longer 
term  objeetives  associated  with  DOD’s  IT  aequisition  reform  movement  (DOD,  2012). 
There  are  four  guiding  strategic  goals  which  are  diseussed  in  this  plan.  The  workforee 
strategie  goals  are  (1)  ereate  a  robust,  sustainable  IT  aequisition  and  IT  Program 
Management  eommunity;  (2)  develop  a  eompeteney  model  and  eareer  roadmaps  for  IT 
aequisition  and  IT  Program  Management  personnel;  (3)  sustain  learning  and  growth 
throughout  the  professional  life  cycle;  and  (4)  work  aeross  broad  stakeholder 
eommunities  to  integrate  IT  aequisition  reforms  into  IT  aequisition  eurricula  (DOD, 
2012). 

Of  the  four  strategie  goals.  Goal  2  foeuses  on  supporting  the  IT  Program 
Management  eareer  field.  There  are  four  actions  that  support  developing  a  competency 
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model  and  career  roadmaps  for  IT  acquisition  and  IT  Program  Management.  The  first 
action  was  to  conduct  a  competency  review  for  the  IT  acquisition  workforce.  The 
competency  model  identifies  competencies  and  proficiencies  required  of  employees  as 
they  move  along  that  path  (DOD,  2012).  The  DOD  CIO  initiated  a  comprehensive  IT 
acquisition  competencies’  review  that  aligned  with  a  broader  AT&L  acquisition 
competency  development  effort  to  identify  characteristics  of  successful  IT  acquisition 
workforce  members  (DOD,  2012).  There  was  a  four-phase  process  to  build  an  IT 
acquisition  workforce  competency  model.  The  four  phases  were  (1)  Competency 
Framework  Development;  (2)  Competency  Model  Development;  (3)  Competency  Model 
Testing  &  Refinement;  and  (4)  Competency  Assessment  &  Sustainment.  The  second 
action  was  to  review  IT  acquisition  career  field  certification  requirements.  This  focused 
on  entry-level  and  experience  requirements.  At  the  time  of  this  writing,  the  IT  acquisition 
career  field  certification  rate  was  the  lowest  of  any  of  the  14  acquisition  fields.  The  IT 
functional  leader  (FL)  was  to  review  the  requirements  to  determine  the  right  mix  of 
education,  training,  and  experience  needed  to  improve  the  workforce  capability  and 
quality. 

The  third  action  was  to  develop  senior-level  IT  acquisition  capabilities.  The  IT  FL 
will  partner  with  AT&L  to  develop  IT  acquisition  key  leadership  positions  (KLP)  within 
the  IT  acquisition  career  field.  Individuals  designated  as  KLPs  have  significant 
responsibilities  and  authorities  and  warrant  special  management  attention  for 
qualification  and  tenure  requirements.  The  fourth  action  was  to  develop  the  IT  Program 
Management  career  field.  The  0PM,  with  input  from  agencies  and  the  0MB,  began  an 
effort  in  January  2011  to  create  a  specialized  career  path  for  IT  PMs  (DOD,  2012).  This 
initiative  resulted  in  a  separate  occupational  title  specific  to  IT  PMs  being  created  within 
the  current  IT  Management  (2210)  series.  The  0PM  also  published  the  IT  Program 
Management  Career  Path  Guide  (November  2011),  which  captured  critical  activities  for 
agencies  to  achieve  success  in  federal  IT  program  management  through  recruitment, 
development,  and  retention  of  top  talent  (Kundra,  2012). 
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III.  DIFFERENCES  IN  INFORMATION  TECHNOLOGY 
PROGRAM  MANAGEMENT 

A,  COMPETENCIES 

Having  skilled,  competent,  and  professional  program  and  project  managers  is 
essential  to  the  success  of  programs.  Unfortunately,  the  subject  matter  competencies 
required  for  successful  IT  system  acquisition  are  too  often  missing  in  program  managers 
responsible  for  program  execution  (OUSD[AT&L],  2009).  In  support  of  the  White 
House’s  25  Point  Implementation  Plan,  0PM,  0MB,  and  the  CIO  council  initiated  a 
government-wide  study  to  identity  critical  competencies  for  IT  program  and  project 
management  work.  In  2011,  the  IT  Program  Management  Competency  Model  was 
published  to  establish  a  baseline  knowledge  and  skill  requirement  for  managing  IT 
programs.  The  competency  model  ensures  that  program  and  project  managers  possess  the 
knowledge,  skill,  and  ability  necessary  to  advance  in  an  IT  Program  Management  career. 
The  competency  model  also  supports  agency  efforts  in  achieving  success  in  Federal  IT 
Program  Management  through  workforce  planning,  training  and  development, 
performance  management,  recruitment,  and  selection  (0PM,  2011). 

The  competency  model  for  IT  program  management  is  part  of  the  IT  Program 
Management  Career  Path  Guide.  The  model  is  separated  by  category  and  grade  level.  The 
two  categories  that  reference  competencies  are  general  and  technical.  The  grade  levels 
listed  pertain  to  general  schedule  (GS)  positions  for  GS-13,  GS-14,  and  GS-15.  For  the 
DOD,  a  GS-13  is  considered  an  entry-level  management  position.  Within  the  Army,  the 
position  is  filled  by  a  Major/0-4.  A  GS-14  is  considered  to  be  a  mid-level  management 
position.  Within  the  Army,  the  position  is  filled  by  a  Lieutenant  Colonel/0-5.  A  GS-15  is 
considered  to  be  a  senior-level  management  position.  Within  the  Army,  the  position  is 
filled  by  a  Colonel/0-6. 
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General  Competency  Model 


All  program  managers  apply  common  knowledge,  skills,  and  competencies  when 
managing  programs.  The  general  competency  model  identifies  the  competencies  required 
to  be  a  program  manager  in  the  professional  acquisition  workforce  (see  Table  1). 


IT  Program  Management  Competencies  by  Grade  Level 


General  Competencies 

Grad*  13 

Grad*  14 

Grad*  IS  1 

•  Accountability 

•  Accountability 

•  Accountability 

•  Attantion  to  0*tail 

•  Attention  to  Detail 

•  Attention  to  Detail 

•  Computer  Skills 

•  Computer  Skills 

•  Computer  Skills 

•  Conflict  Management 

•  Conflict  Management 

•  Conflict  Management 

•  Creative  Thinking 

•  Creative  Thinking 

•  Creative  Thinking 

•  Customer  Service 

•  Customer  Service 

•  Customer  Service 

•  Decision  Making 

•  Decision  Making 

•  Decision  Making 

•  Flexibility 

•  Flexibility 

•  External  Avdareness 

•  Influencing/Negotiating 

•  Influencing/Negotiating 

•  Flexibility 

•  Integrity/Honesty 

•  Integrity/Honesty 

•  Infiuencing/Negotiating 

»  Interpersonal  Skills 

•  Interpersonal  Skills 

•  Integrity/Honesty 

•  Leadership 

•  Leadership 

•  Interpersonal  Skills 

•  Learning 

•  Learning 

•  Leadership 

•  Oral  Communication 

•  Oral  Communication 

•  Learning 

•  Organizational  Av/areness 

•  Organizational  Av^reness 

•  Managing  Human  Resources 

•  Planning  and  Evaluating 

•  Partnering 

•  Oral  Communication 

t  Problem  Solving 

•  Planning  and  Evaluating 

•  Organizational  Awareness 

•  Reading  Comprehension 

•  Political  Savvy 

•  Partnering 

•  Reasoning 

•  Problem  Solving 

•  Planning  and  Evaluating 

•  Self-Management 

•  Reading  Comprehension 

•  Political  Savvy 

•  Strategic  Thinking 

•  Reasoning 

•  Problem  Solving 

•  Teaching  Others 

•  Self-Management 

•  Reading  Comprehension 

•  Teamwork 

•  Strategic  Thinking 

•  Reasoning 

•  Technical  Competence 

•  Teaching  Others 

•  Self-Management 

•  Writing 

•  Teamwork 

•  Technical  Competence 

•  Vision 

•  Writing 

•  Strategic  Thinking 

•  Teaching  Others 
»  Teamwork 

•  Technical  Competence 

•  Vision 

»  Writing 

Table  1 .  IT  Program  Management  General  Competency  Model 

(from  0PM,  2011). 


2,  Technical  Competency  Model 

In  addition  to  the  knowledge,  skills,  and  competencies  required  of  all  program 
managers  (see  Table  2),  specifically  the  IT  PM  also  requires  specific  knowledge,  skills, 
and  competencies  in  managing  IT  programs.  The  technical  competency  model  identifies 
the  minimum  competencies  by  position.  This  is  required  to  specialize  as  an  IT  PM  in  the 
professional  acquisition  workforce. 
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IT  Program  Management  Competencies  by  Grade  Level 


Technical  Competencies 

Grade  13 

Grade  14 

Grade  IS 

•  Change  Managennent 

•  Configuration  Management 

•  Cost‘Ben«fit  Analysis 

•  Data  Management 

•  Information  Assurance 

•  Information  Management 

•  Information  Resources  Strategy 
and  Planning 

•  Project  Management 

•  Quality  Assurance 

•  Requirements  Analysis 

•  Risk  Management 

•  Systems  Life  Cycle 

•  Systems  Testing  and  Evaluation 

•  Technology  Awareness 

»  Acquisition  Strategy 

•  Change  Management 

»  Configuration  Management 

•  Ccntracting/Procurement 

•  Cost-Benefit  Analysis 

•  Financial  Management 
»  Information  Assurance 

•  Information  Technology  Program 
Management 

•  Project  Management 
»  Quality  Assurance 

•  Requirements  Analysis 

•  Risk  Management 

•  Stakeholder  Management 
»  Systems  Life  Cycle 

•  Technology  Awareness 

•  Acquisition  Strategy 

•  Capital  Planning  and  Investment 
Assessment 

•  Change  Management 

•  Compliance 

•  Configuration  Management 

•  Contracting/Procuremant 

•  Cost-Benefit  Analysis 

•  Data  Management 

•  Enterprise  Architecture 

•  Financial  Management 

•  Information  Assurance 

>  Information  Management 

•  Information  Resources  Strategy 
and  Planning 

•  Information  Systems  Security 
Certification 

•  Information  Technology 
Architecture 

•  Information  Technology  Program 
Management 

•  Project  Management 

•  Quality  Assurance 

•  Requirements  Analysis 

•  Risk  Management 

•  Stakeholder  Management 

•  Systems  Engineering 

•  Systems  Life  Cycle 

•  Systems  Testing  and  Evaluation 

•  Technology  Awareness 

Table  2.  IT  Program  Management  Technical  Competency  Model 

(from  0PM,  2011). 


B.  CERTIFICATIONS 

Two  institutions  can  certify  IT  and  non-IT  Program  and  IT  Project  Managers.  The 
Defense  Acquisition  University  (DAU)  certifies  DOD  civilian  employees  and  military 
Soldiers  and  Officers  assigned.  Also,  it  will  include  an  assignment  to  an  acquisition 
coded  position  (www.DAU.mil).  The  second  is  the  Federal  Acquisition  Institute  (FAI). 
They  certify  all  federal  employees  of  executive  branch  agencies. 

1,  Defense  Acquisition  University 

In  1991,  the  Defense  Authorization  Act,  Public  Law  101-510  was  instituted.  It 
called  for  establishing  an  Acquisition  Corps  and  professionalizing  the  acquisition 
workforce  through  education,  training,  and  work  experience  (Garcia,  Keyner,  Robillard, 
&  VanMullekom,  1997).  As  a  result  of  this  act,  the  Defense  Acquisition  Workforce 
Implementation  Act  was  enacted  to  improve  the  effectiveness  of  personnel  who  managed 
and  implemented  defense  acquisition  programs.  The  Defense  Acquisition  University  was 
established  to; 
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(1)  Educate  and  train  professionals  for  effeetive  serviee  in  the  defense 
acquisition  system  (2)  achieve  more  effieient  and  effective  use  of  available 
acquisition  resources  by  eoordinating  DOD  acquisition  education  and 
training  programs  and  tailoring  them  to  support  the  careers  of  personnel 
in  aequisition  positions  and  (3)  develop  edueation,  training,  researeh, 
and  publieation  eapabilities  in  the  area  of  aequisition.  (DODD  5000.57, 

1991,  p.  2) 

Additionally,  DAU  would  be  responsible  for  the  researeh  and  analysis  of  defense 
aequisition  policy  issues  from  an  aeademic  perspeetive  (PL  101-510,  1990).  The  training 
standards,  requirements,  and  courses  have  been  modified  over  time  to  meet  the  ever- 
changing  acquisition  environment. 

To  be  eonsidered  Level  1-eertified  in  IT,  a  DOD  employee  or  military  offieer  has 
to  meet  the  eore  eertifieation  standards  found  in  Table  3.  To  be  Level  1-eertified  in 
Program  Management,  a  DOD  employee  or  military  officer  has  to  meet  the  eore 
eertifieation  standards  found  in  Table  4. 


CERTinCATION  STAXDARDS  A-  CORF  PL  I  S  DE\TLOPMENT  GUIDE 

INFORX(ATIO\  TFCHNOI  OGV  1F\T1.1 


Core  Cerdfkation  Standards  (RofundfoDAUiAccrtfcsbaa) 

•  .4CO  IQl  Ftwinmfnmis  of $>-aaBS  Acqaiaiioo  Managemat 

'  ■■rtiful  Tniaiic 

•  IR-M  101  Basic  Iitfbnnaboo  Sx-stems  Acqutsiboii 

•  or 

•  S.\M  101  Basic  Software  Acqutsilioo  Maaagnseni 

•  Formal  edocatioa  oot  required  for  ceiiiScatioo 

:  tfrnrtrr 

•  1  rear  of  ftcquisiboo  otperience  b  bformaticn  tecl>xik>f> 

Table  3.  Information  Teehnology  Level  1  Certification  Standard  (after  DAU,  2014) 


CERTIFICATION  ST.\.\'D.\RDS  &  CORE  PLl'S  DEMLOPNENT  GUDE 

_ PROOR-A-M  MANAGEMENT  LEMLl _ 


Core  CertiScation  Standards  (RMiiwcardrDA«iAcMt£cikc«.) 

Tniaiai 

•  ■4CQ 101  Fimdanentids  of  $>-stettts  Acquisiboci  Macagemect 

FtartiMul  Tniaut 

•  SYS  101  FuDdauent^  of  Sv-stems  PlaDobg.  Research.  DeseloptDeA  aod  Engbeenig 

•  CLB  00*  CostAn^'sis 

•  CLV016  lotroducboQ  to  Earned  Value  MaDagement 

[asfiiMi 

•  Formal  edicaioa  not  required  fc«  cert&aticiD 

•  1  s-ear  of  acquisiboo  experieoce 

•  Efrecthe  1  October  2014  the  requaemeot  changes  to: 

•  1  >-ear  of  acquisiiioa  experience  niib  cost,  scberUe.  and  performance  respombiiies 

Table  4.  Program  Management  Level  1  Certifieation  Standard  (after  DAU,  2014) 
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To  be  considered  Level  2-certilied  in  IT,  a  DOD  employee  or  military  officer  has 
to  meet  the  core  certification  standards  found  in  Table  5.  To  be  Level  2-certified  in 
Program  Management,  a  DOD  employee  or  military  officer  has  to  meet  the  core 
certification  standards  found  in  Table  6. 


CFRTinCATTON  STANDARDS  A-  CORF  PI  LS  DFXTI  OPMFVT  CiLIDF 

INFORMATION  TECHNOLOGY  LE\-EL: 

C<>reCeiti5catXmStaiHlards(Reqw«4rarDA«lAccrtfcdKm.)  1 

Ar^iuiliaa  Tnilil| 

•  ACO  20IA  Iftenoediale  S>‘stems  Acquisiboo.  Pst  A 

•  ACQ  201B  lotsmedse  S>'stam  Acqiisitioa.  Pst  B  (R) 

t  ■•rtiMil  Tnmia^ 

•  IRM  202  Iitennedate  IffcnnaboD  SN-stenu  Acquisiboo  (R) 

•  Fonnal  educaboa  not  leqtsed  for  ceit£caboo 

•  1  >'ean  of  acqubiboa  npenence  s  ifonnabon  ted»olog>‘ 

Table  5. 

Information  Technology  Level  1  Certification  Standard  (after  DAU,  2014) 

CERTmCATlON  STANDARDS  &  CORE  PLUS  DE\  ELOPNENT  GL  IDE 

PROGRAM  MANAGEMENT  LEML: 

Core  Certification  Standards  (ReqgndrsDA^iAcotfoboa)  I 

Ar^tiiinaa  TniuKf 

•  ACO  201A  lotetmcdise  S^'staDS  Acqiisiboo.  Pst  A 

*  ACQ  201B  Inomodise  Systems  Acqubakn,  Pst  B  (R) 

t  ■■rfiMiI  Traiiiac 

•  PMT  251  Projrsa  MstagoMot  Toob  Cowse,  Pan  I 

•  PMT  25*  ProgrsD  ManageiDent  Took  Coarse,  Pan  II 

•  CON  111  Ccotract  Plsnig 

•  CON  124  Coolract  Execubon 

•  CON  12*  Coalract  Maaaget&ent 

•  aoddiberof(befc4cming  cen^teted  oo  or  after  NV 15. 2005 

•  SAM  101  Basic  So^are  Acqubiboo  Manageinai 

•  or 

•  IRM  IQl  Basic  Irfonnaboii  Sv-stems  Acqubiboa 

• 

•  Effectbe  1  October  2014  the  belo«'cowscb  added  as  arequirement 

•  EVM  101  Ftpdamentads  cf  Earoed  \'aloe  Management 

•  Fonnal  educaboo  ooc  required  for  ceitificaboQ 

•  2  v-ears  of  acqubiboa  experience,  sleast  1  v-es  of  dMse;q>enence  must  be  in  program  management 

• 

•  Effectrve  1  October  2014  the  reqisement  changes  to: 

•  2  >'ean  n  program  manageiDent  cost,  sebedde,  and  performssce  respoosUibes 

Table  6.  Program  Management  Level  2  Certification  Standard  (after  DAU,  2014) 


To  be  considered  Level  3-  certified  in  Information  Technology,  a  DOD  employee 
or  military  officer  has  to  meet  the  core  certification  standards  found  in  Table  7.  To  be 
Level  3 -certified  in  Program  Management,  a  DOD  employee  or  military  officer  has  to 
meet  the  core  certification  standards  found  in  Table  8. 
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CERTIFICATION  ;T.A.\I>.ARDS  A  CORE  PEL'S  DEMLOPNENT  GUIDE 

INTOR-MATION  TECHNOLOGY  LE\-EL3 

Core  CertiScalxm  Standards  (Kcqand  for  DAWiAcctttfctfMo.)  I 

•  None  Re^ed 

(■■niMil  Tntaiif 

•  IRM  304  Ad\'aaced  Ii^onnaboa  Systems  Acqnisibcio  (R) 

•  S.AM  301  Adi-aoted  So^aie  Acqaiskioo  Management  (R) 

•  Fonnal  edacaboo  not  re^ed  for  ceit£caboo 

•  4  >-ears  d  kfonnaboo  technok>g>’  or  softnare-nteosn'e  s>'stems  acqitskioa  experience 

Table  7.  Information  Technology  Level  3  Certification  Standard  (after  DAU,  2014) 


CERTIFICATION  SLA-VD.^S  &  CORE  PLUS  DEX-ELOPNIENT  GL'IDE 


PROGRAM  \U\AGEME\T  LE\'EL3 


Core  Certification  Standards (iu«)uR4fo(DAW]Ac«tfcttoB) 

Tniatic 

•  None  reqwed 

’■•rtjMil  Tratauf 

•  BCF  103  FuDdauent^cfBuoaessFeaKialManagemat 

•  Fundarnem^o^Eanied  Value  Management 

•  LOG  103  Rdiabdib',  A^'aiabd^^^  and  Maintainaibit>'  (RAM) 

•  PMT  352.4  Program  Managemett  Office  Coarse,  Part  A 

•  PMT352B  Program  Management  Office  Course,  Part  B  (R) 

•  SYS  202  Imermedate  Sv-stems  PlanniDg.  Research,  Desdopmeot,  ad  Engneering.  Part  I 

• 

•  Effecttv-e  1  October  2014,  E\'M  101  becomes  a  Lese)  II  reqiirement  tice  a  Level  HI  requirement 

•  Formal  edicatioa  not  requked  for  certiBcatioa 

•  4  )eas  acqoisiboQ  experience  uifa  at  least 

•  -  2  ^ears  ia  a  program  office  siniar  organiutioa  (dedicated  matrix  support  to  a  PNL  PEO,  DCMA  propam  integrator,  or  supervisor  of  sfatphuUng) 

•  - 1  a  program  management  posttonxxilh  cost  schedule,  and  performance  respoosMibes 

•  EfiKtre  1  October  2014  the  reqiaremeni  changes  to; 

•  4  \ears  in  prograi  management  nith  cost,  schedole  and  performance 

•  At  kast  2  years  in  a  program  office  or  sitdar  orgaruabon  (dedicated  matrix  support  to  a  PM.  PEO,  DCMA  progrmn  ixegralor.  or  sqpenisor  of  shgibxddiig)  These  t«'o  yeas  ma>’ 
run  concvrent  xxitb  ffie  preceding  4  reqiarement 

•  OR 

•  lex'd  ni  DAWIA  certfficabon  in  a  another  acqtasiboo  fbocbonal 

•  2  yeas  in  program  management  xxitfa  cost,  schedie  and  perfotmance 

•  2  >vas  ia  a  prt^an  office  or  snia  orgaoizaboo  (dedcaed  matrix  sxpport  to  a  PNL  PEO.  DCMA  program  ntegraor.  or  sqperxisor  of  sh^pbxdding)  These  2  years  may  nn 
coDcxnent  xxifa  the  preceffing  Lex'd  HI  or  2  yea  reqoiremeats 

Table  8.  Management  Level  3  Certification  Standard  (after  DAU,  2014) 

2,  Federal  Acquisition  Institute 

The  Services  Acquisition  Reform  Act  of  2003,  Public  Law  108-136,  expanded 
the  definition  of  acquisition  to  include  functions  performed  by  program  and  project 
managers  (0MB,  2013).  The  Office  of  Federal  Procurement  Policy  (OFPP)  Policy  Letter 
05-01 —  Developing  and  Managing  the  Acquisition  Workforce — ^built  upon  this  broader 
definition  of  acquisition  workforce.  It  required  the  Federal  Acquisition  Institute  (FAI)  to 
make  recommendations  for  a  program  and  project  management  certification  program 
(Administrator  0MB,  2007).  FAI  fosters  and  promotes  the  development  of  professional 
acquisition  workforce  personnel  and  performs  a  wide  range  of  activities  supporting  the 
management  of  the  acquisition  workforce. 
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In  April  2007,  the  Federal  Aequisition  Certifieation  for  Program  and  Projeet 
Managers  (FAC-P/PM)  was  ereated  to  provide  general  training  and  experienee 
requirements  for  program  and  projeet  managers  in  civilian  agencies.  Individuals  certified 
under  the  FAC-P/PM  program  met  the  general  program  management  competencies  and 
experience  of  the  IT  PM  qualification  guidance.  They  also  had  to  meet  the  technical 
standards  to  fully  satisfy  the  IT  PM  requirements.  In  July  2011,  OFPP  introduced  the 
concept  of  a  core-plus  certification  for  IT  acquisition  professionals.  The  FAC-P/PM-IT 
was  meant  for  those  program  and  project  managers  responsible  for  the  acquisition  of  IT 
assets. 

The  FAC-P/PM  is  founded  on  “(1)  core  competencies  that  are  considered 
essential  for  successful  program  and  project  management;  (2)  experience  requirements; 
and  (3)  continuous  learning  to  maintain  skills  currency”  (Administrator  0MB,  2013,  p. 
A-3).  FAC-P/PM  contains  three  levels  of  certification;  entry-,  mid-  and  senior-level. 
Program  and  project  managers  may  only  be  certified  at  a  certain  level  after  they  achieve 
all  competencies  for  that  certification  level.  FAC-P/PM  certification  requirements  are 
detailed  in  Table  9. 


FAC-P/PM 

Certification 

Requirements 


/\ 


Senior-Level  P/PM 

•  Achieve  senior-tevel  and  ^)propndte  lower  level 
competencies* 

•  Four  years  of  program  or  project  management 
which  shall  include  a  minimum  of  one  year  of 
experieiKe  on  federal  programs  and/or  projects. 

^ithin  the  last  ten  years  ' ' _ 

"  Mid-Level  P/PM 

•  AcNeve  mid-level  and  appropriate  lower  level 
competencies* 

•  Two  years  of  program  or  project  management 

'^jtperience  within  the  last  five  years*  * _ y 

Entry-Level  P/PM 

•  AcNeve  entry-level  competencies* 

-  Or>e  year  of  project  nrtanagement  experience  within 
the  last  five  years** 


80 

continuous 

learning 

points 

(CLPs) 

required 

every  two 

years 


Tabic  9.  Federal  Acquisition  Certification  for  Program  and  Project  Managers 

(FAC-P/PM)  (from  FAI,  2014) 
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The  FAC-P/PM-IT  is  for  PMs  and  project  managers  managing  IT  programs  that 
support  or  have  key  integration  functions  with  major  non-IT  programs.  They  shall  be  at 
least  mid-level  certified.  PMs  or  project  managers  managing  major  IT  programs  shall 
hold  senior  level  FAC-P/PM-IT  specialization.  The  ability  to  specialize  implies  a 
demonstrated  level  of  skill  beyond  the  entry  level.  Thus,  the  IT  specialization  will  be 
granted  to  holders  of  mid-  and  senior-level  FAC-P/PMs.  An  acquisition  workforce 
member  can  satisfy  the  core-plus  competency  requirements  through  training,  education, 
other  relevant  certification  programs,  or  demonstrated  and  documented  through 
fulfillment  of  knowledge,  skills,  and  abilities  (Administrator  0MB,  2013).  FAC-P/PM-IT 
certification  requirements  are  detailed  in  Table  10. 


Table  10.  Federal  Acquisition  Certification  for  Program  and  Project  Managers 
Core-plus  IT  Specialization  (FAC-P/PM-IT)  (from  FAI,  2014) 


C.  REGULATORY  GUIDELINES  AND  POLICIES 

The  specific  DOD  guidelines  and  policies  that  pertain  to  IT  PM  are:  the  25  Point 
Implementation  Plan  to  Reform  Federal  IT  Management;  the  IT  Program  Management 
Career  Path  Guide;  and  the  IT  Acquisition  Workforce  Strategic  Plan.  These  guidelines 
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and  policies  were  eovered  in  Chapter  II.  The  following  directives  and  instructions  apply 
to  the  management  of  information  teehnology,  but  ean  be  performed  by  IT  or  non-IT 
PMs. 


1.  DOD  Instruction  8500,01-Cybersecurity/Information  Assurance 

Program  managers  must  ensure  cyberseeurity  requirements  are  identified  and 
ineluded  throughout  the  life  cyele  of  systems  including  acquisition,  design,  development, 
developmental  testing,  operational  testing,  integration,  implementation,  operation, 
upgrade,  or  replaeement  of  all  DOD  IT  supporting  DOD  tasks  and  missions  (DODI 
8500.01,  2014).  Aeeording  to  eyberseeurity  policy,  “All  IT  that  receives,  proeesses, 
stores,  displays,  or  transmits  DOD  information  will  be  aequired,  eonfigured,  operated, 
maintained,  and  disposed  of  eonsistent  with  applieable  DOD  eyberseeurity  polieies, 
standards,  and  architeetures”  (DODI  8500.01,  2014,  p.  4).  DODI  8500.01  defines 
eyberseeurity  as: 

The  prevention  of  damage  to,  proteetion  of,  and  restoration  of  eomputers, 
eleetronie  eommunieations  systems,  eleetronie  eommunieations 
services,  wire  eommunieation,  and  eleetronie  communication,  including 
information  contained  therein,  to  ensure  its  availability,  integrity, 
authentieation,  eonfidentiality,  and  nonrepudiation,  (p.  55) 

In  addition  to  PMs  managing  the  eyberseeurity  requirements  throughout  the  life 
cyele,  the  DOD  8500.01  states  aequisition  personnel  with  “IT  development 
responsibilities”  are  to  be  qualified  in  aeeordanee  with  the  Information  Assuranee 
Workforee  Improvement  Program.  This  requirement  means  a  PM  must  obtain  and 
maintain  a  certifieation  eorresponding  to  the  highest  level  function  performed.  The  DOD 
lA  workforee  is  split  into  two  major  eategories  of  Teehnieal  and  Management.  Both 
eategories  are  eomprised  of  three  levels:  I,  II,  and  III.  IT  PMs  would  not  perform  lAT 
funetions  as  they  are  teehnieal  in  nature. 

2.  DOD  Directive  5000,01-The  Defense  Acquisition  System 

The  Defense  Aequisition  System  exists  to  manage  the  nation’s  investments  in 

teehnologies,  programs,  and  produet  support  neeessary  to  aehieve  the  National  Security 

Strategy  and  to  support  the  United  States  Armed  Forees  (DODD  5000.01,  2007).  This 
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directive  describes  the  overarching  management  principles  and  mandatory  policies.  The 
areas  that  apply  to  programs  containing  information  technology  are  Information 
Assurance,  Information  Superiority,  and  Interoperability.  The  Information  Assurance 
section  states  that  “Acquisition  managers  shall  address  information  assurance 
requirements  for  all  weapon  systems;  Command,  Control,  Communications,  Computers, 
Intelligence,  Surveillance,  and  Reconnaissance  systems;  and  information  technology 
programs  that  depend  on  external  information  sources  or  provide  information  to  other 
DOD  systems.”  The  Information  Superiority  section  states  the  following: 

Acquisition  managers  shall  provide  U.S.  Forces  with  systems  and  families 
of  systems  that  are  secure,  reliable,  interoperable,  compatible  with  the 
electromagnetic  spectrum  environment,  and  able  to  communicate  across  a 
universal  information  technology  infrastructure,  including  national 
security  systems  (NSS),  consisting  of  data,  information,  processes, 
organizational  interactions,  skills,  analytical  expertise,  other  systems, 
networks,  and  information  exchange  capabilities.  (DODD  5000.01,  2007, 

p.  6) 

The  Interoperability  section  states  that: 

Systems,  units,  and  forces  shall  be  able  to  provide  and  accept  data, 
information,  materiel,  and  services  to  and  from  other  systems,  units,  and 
forces  and  shall  effectively  interoperate  with  other  U.S.  Forces  and 
coalition  partners.  Joint  concepts  and  integrated  [solution]  architectures 
shall  be  used  to  characterize  these  interrelationships.  (DODD  5000.01, 

2007,  p.  7) 

Each  section  has  a  specific  directive  that  provides  details  on  how  IT  is  applicable 
to  program  managers. 

3,  DOD  Directive  5000,02-Operation  of  the  Defense  Acquisition  System 

The  overarching  management  principles  and  mandatory  policies  that  govern  the 
Defense  Acquisition  System  are  described  in  DOD  Directive  5000.01.  This  directive 
provides  the  detailed  procedures  that  guide  the  operation  of  the  system.  Enclosure  1 1 
describes  the  requirements  applicable  to  all  programs  containing  information  technology. 
Program  managers  that  manage  IT  projects  and/or  programs  have  to  comply  with  the  14 
policies  and  procedures  contained  in  this  directive.  Even  though  the  policies  and 

procedures  are  specific  to  IT,  any  program  manager  can  execute  them. 
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4,  DOD  Directive  4630.05-Interoperability  and  Supportability  of 
Information  Technology  and  National  Security  Systems 

This  directive  requires  IT  and  NSS  employed  by  U.S.  forces  to  interoperate  with 
existing  and  planned  systems  and  equipment  of  joint,  combined,  and  coalition  forces  and 
with  other  U.S.  government  departments  and  agencies  (DODD  4630.05,  2004).  Program 
managers  shall  make  certain  that  IT  and  NSS  interoperability  be  verified  early  and  with 
sufficient  frequency  throughout  a  system’s  life.  This  also  applies  to  changes  affecting 
interoperability  or  supportability,  to  assess,  evaluate,  and  certify  its  overall 
interoperability  and  supportability  within  a  given  capability  (DODD  4630.05,  2004). 

5,  DOD  Directive  8000,01-Management  of  the  Department  of  Defense 
Information  Enterprise 

This  section  discusses  the  DOD  Information  Enterprise  and  its  role  in  helping 
program  managers  describe  their  transition  from  the  current  environment  to  the  future 
net-centric  environment.  Consistent  with  DODD  5000.01  and  DODI  5000.02: 

Acquisition  strategies  shall  appropriately  allocate  risk  between  the 
Government  and  contractor;  effectively  use  competition;  tie  contract 
payments  to  performance;  and,  where  practicable,  take  maximum 
advantage  of  commercial  off-the-shelf  and  non-developmental  item 
technology.  Information  solutions  shall  be  structured  into  useful  segments 
that  are  as  narrow  in  scope  and  brief  in  duration  as  practical;  each  segment 
shall  solve  a  specific  part  of  an  overall  mission  problem  and  deliver  a 
measurable  net  benefit  independent  of  future  segments  (DODD  8000.01, 

2009,  p.  3). 

6,  Defense  Acquisition  Guidebook 

Chapter  VII  of  the  Defense  Acquisition  Guidebook  (DAG)  discusses  how  DOD 
complies  with  statutory  and  regulatory  requirements  for  acquiring  IT  and  NSS.  This 
includes  using  a  network-centric  strategy  to  transform  DOD  warfighting,  business,  and 
intelligence  capabilities.  This  chapter  also  provides  descriptions  and  explanations  of  the 
Clinger-Cohen  Act  and  many  other  associated  topics  and  concepts,  and  discusses  many 
of  the  activities  that  enable  the  development  of  net-centric  systems  (DAG,  2012). 
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IV.  ANALYSIS 


A.  INTRODUCTION 

This  chapter  discusses  the  similarities  and  differences  between  IT  PMs  and  non- 
IT  PMs.  The  first  section  discusses  the  competencies  that  were  identified  in  Chapter  III. 
The  second  section  reviews  the  certification  requirements  for  becoming  an  IT  PM.  The 
remainder  of  this  chapter  covers  the  cybersecurity  requirements  for  PMs  charged  with  IT 
development  responsibilities. 

B,  PM  COMPETENCY  ANALYSIS 

An  analysis  between  general  and  technical  competencies  was  conducted  to 
determine  which  competency  model  was  essential  in  managing  IT  programs. 

1.  General  vs.  Technical  Competency  Models 

The  general  competencies  listed  in  Table  1  are  required  for  all  program  managers. 
The  higher  a  PM’s  grade,  the  more  competencies  are  required  for  that  position.  This 
study’s  research  discovered  that  general  competencies  are  the  most  important  for 
achieving  success  as  a  program  or  project  manager.  Leadership  stands  above  all  other 
competencies  and  is  the  primary  role  of  a  program  manager.  History  has  shown  that 
without  strong  leadership,  teams  are  likely  to  stray  from  sound  fundamentals  and 
implement  high-risk  shortcuts,  placing  the  project  in  jeopardy  (Forsberg,  Mooz  & 
Cotterman,  2005).  A  report  conducted  by  the  Project  Management  Institute  (PMI)  (Figure 
1)  also  identifies  leadership  as  the  most  important  skill  to  manage  a  program  or  project. 
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Most  Important  Skills  to  Successfully  Manage  Highly  Complex  Projects 


L«a<l«fship  skills 

81 

Technical  proj«t 

Bao/ 

management  skills  1  1 

mv  70 

Strategic  and  business  l^l| 

l9% 

management  skills  TO  I 

Other 

ll% 

Source  IvunvfXtMfmatmKItlnihtutr 

'--jXrt  Njvi  ■  ^crg/l^'  - 

Figure  1 .  Most  Important  Skills  to  Successfully  Manage  Highly  Complex 

Projects  (from  PMI,  2013  ) 

PMs  need  to  have  good  “soft  skills”  to  achieve  success  on  programs  or  projects. 
Some  soft  skills  include  communication,  influencing,  negotiating,  conflict  management 
and  problem  solving.  For  PMs  to  meet  stakeholders’  needs  and  expectations,  they  must 
be  able  to  communicate,  negotiate,  influence,  and  solve  problems  within  their 
organization.  PMs  need  to  actively  listen  to  their  teams  and  assist  in  developing  new 
approaches  for  solving  problems  and  then  influence  the  team  to  achieve  the  program  or 
project  goals.  It’s  important  for  PMs  to  have  organizational  awareness  and  political  savvy 
to  understand  their  social,  physical,  and  political  environment.  Organizational  issues  are 
often  the  most  difficult  part  of  working  on  and  managing  projects  (Schwalbe,  2006). 
Lastly,  PMs  must  remain  flexible  to  deal  with  the  complex  and  rapidly  changing 
environment  when  working  towards  program  or  project  goals. 

The  technical  competencies  listed  in  Table  2  are  required  for  IT  PMs.  Not  all  of 
the  competencies  are  IT-specific.  By  taking  a  closer  look,  some  competencies  are 
considered  common  knowledge  and  skills  for  all  PMs.  For  example,  cost-benefit  analysis, 
requirements  analysis,  and  risk  management  are  all  common  skills  a  PM  should  possess. 
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Technical  Competencies 

Grad*  15 

*  Acquiiitron  Strategy 

*  Capital  Planning  and  tnvestment 

Axsaiirnent 

»  Change  F^anagement 

*  Complianc* 

>  Cpnfigu ration  Management 

*  Cor>tractinig/Procurenrv«nt 

*  Coit-eeneht  Analysis 

*  Data  Management 

*  Enterprii*  Architecture 

*  Financial  Management 

*  Information  Aisuranct 

»  Information  Managerrent 
I  Information  Reioorcei  Strategy 
and  Planning 

*  Information  Systems  Security 
Certification 

*  Information  Technology 
Architecture 

*  Information  Technology  Program 
Management 

*  Project  Management 

*  Quality  Aiiurmce 

*  Requirements  Analysis 

*  Risk  Management 

K  Stakeholder  Management 

*  Systems  Engineering 
»  Systems  Uf'e  Cycle 

*  Systems  Testing  and  Evaluation 

*  Technology  Av,^  re  ness 


Table  1 1 .  Technical  Competencies  for  IT  (after  0PM,  2011) 


Of  the  25  technical  competencies  listed  in  the  GS-15  column,  only  32%  are 
considered  IT-specific  knowledge,  skills,  and  abilities.  The  remaining  68%  relate  to 
knowledge,  skills,  and  abilities  of  non-IT  PMs.  These  statistics  indicate  that  general 
competencies  are  more  important  than  technical  as  they  relate  to  the  differences  between 
IT  and  non-IT  PMs.  While  it  is  recommended  that  IT  PMs  have  some  working 
knowledge  in  the  field  of  IT,  they  do  not  necessarily  have  to  be  experts  on  any  specific 
technology.  PMs  need  to  know  enough  to  build  strong  teams  and  to  ask  the  right 
questions.  Consequently,  it  might  be  difficult  for  a  PM  with  little  or  no  experience  in  IT 
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to  become  the  program  manager  of  a  large  IT  program  or  project.  A  potential  setback 
could  be  earning  the  respect  of  the  project  team.  But  when  a  PM  is  an  IT  expert,  the  PM 
may  only  focus  on  enhancing  technical  skills.  Some  IT  experts  do  not  see  how  soft  skills 
or  business  skills  will  improve  their  performances  or  increase  their  salaries.  This  is 
another  potential  setback  of  selecting  a  PM  with  a  strong  background  in  IT. 

The  Government  Accountability  Office  (GAO)  conducted  a  study  which 
identified  seven  successful  federal  IT  investments  that  achieved  their  respective  cost, 
schedule,  and  performance  goals.  GAO  identified  nine  common  factors  that  were  critical 
to  the  success  of  three  or  more  of  the  seven  IT  investments.  The  nine  critical  success 
factors  are  shown  in  Table  12  and  the  Federal  Department  IT  investments  are  shown  in 
Table  13. 


Commonly  IdentifiocJ  Critical  Success  Factors  across  Seven  Successful  IT  Investments 

Investments 

Critical  auccass  factors 

ORIS 

GCSSU 

MOMentum 

WHTI 

ITWS 

CADE  2 

OHRS 

1 

Program  ofBdals  were  actively  er>9a9ed  with 
stakeholdefs. 

X 

X 

X 

X 

X 

X 

X 

2 

Program  staff  had  the  necessary  knowledge  and 
skills. 

X 

X 

X 

X 

X 

X 

3 

Senior  department  arxJ  ager>cy  executives 
supported  the  programs. 

X 

X 

X 

X 

X 

X 

4 

End  users  ar»d  stakeholders  were  involved  in  the 
development  of  requirements. 

X 

X 

X 

X 

X 

5 

End  users  participated  in  testir>g  of  system 
functionality  prior  to  formal  ef>d  user  acceptarKe 
testir>g. 

X 

X 

X 

X 

X 

6 

Government  and  contractor  staff  were  consistent 
arwj  stable. 

X 

X 

X 

X 

7 

Program  staff  prioritized  requirements. 

X 

X 

X 

X 

8 

Program  ofBdals  maintained  regular 
communicatioo  with  the  prime  contractor. 

X 

X 

X 

X 

9 

Programs  received  sufficient  funding. 

X 

X 

X 

SotfW:  GAO  Oam. 


Table  12.  Commonly  Identified  Critical  Success  Factors  across  Seven 
Successful  IT  Investments  (from  GAO,  2011) 
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Investments  Identified  as  Successful  by  Federal  Departments 

Department 

Investment 

Commerce 

Decennial  Response  Integration  System 

Defense 

Global  Combat  Support  System-Joint.  Inaement  7 

Energy 

Manufactunng  Operations  Management  (MOMentum)  Project 

Homeland  Security 

Western  Hemisphere  Travel  Initiative 

Transportation 

Integrated  Terminal  Weather  System 

Treasury 

Customer  Account  Data  Engine  2  (CADE  2) 

Veterans  Affairs 

Occupational  Health  Record-keeping  System 

Soucs:  A^mcy  daU. 


Table  13.  Investments  Identified  as  Successful  by  Federal  Departments 

(from  GAO,  2011) 


Of  the  nine  critical  factors  listed,  over  half  incorporated  general  competencies  that 
contributed  to  the  successful  acquisition  of  IT  investments.  None  referenced  the  program 
manager  needing  IT  technical  competencies  to  be  successful.  The  GAO  concluded  their 
report  by  stating  that  the  implementation  of  these  factors  will  not  necessarily  ensure 
successful  IT  acquisitions;  nevertheless,  these  factors  may  help  federal  agencies  address 
the  IT  acquisition  challenges.  The  following  are  comments  cited  from  agency  officials 
that  participated  in  the  report; 

•  Internal  Revenue  Service  (IRS)  officials  stated  that  consistent  and  open 
communication  with  internal  and  external  stakeholders  was  critical  to  the 
success  of  their  program. 

•  National  Nuclear  Security  Administration  (NNSA)  stated  that  notifying 
stakeholders  of  potential  issues  as  soon  as  they  were  identified  helped 
foster  transparency  and  trust. 

•  Customs  and  Border  Protection  (CBP)  officials  noted  almost  every 
member  working  on  the  team  had  a  good  understanding  of  acquisitions 
including  an  understanding  of  program  management. 

•  The  NNSA  selected  a  program  manager  from  the  end  user  organization  as 
opposed  to  an  individual  with  an  IT  background.  The  individual  selected 
has  decades  of  experience  managing  shop  floor  control  systems.  He  was 
well  aware  of  how  the  work  on  the  shop  floor  was  done  and  focused  on 
safely  delivering  the  necessary  functional  requirements  to  the  end  user. 
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•  Veterans  Affairs  (VA)  offieials  stated  that  ensuring  a  positive,  non- 
adversarial  relationship  between  prime  contractor  and  the  program 
management  office  was  critical  to  the  success  of  the  investment. 

In  conclusion,  these  examples  demonstrate  a  program  manager  can  successfully 
manage  large,  complex  IT  programs  by  combining  program  management  knowledge  with 
general  competencies. 

C.  CERTIFICATION  FOR  IT  PM 

As  stated  in  Chapter  III,  the  two  institutions  that  certify  IT  and  non-IT  program 
and  project  managers  are  DAU  and  FAT  DAU  certifies  DOD  civilian  employees  and 
military  officers  while  FAI  certifies  all  federal  employees  of  the  executive  branch 
agencies.  An  analysis  of  the  two  institutions  was  conducted,  and  both  share  similarities 
and  differences  for  developing  and  strengthening  IT  PMs.  Both  institutions  cover  the  core 
competencies,  but  they  differ  on  when  the  knowledge  and  experience  is  necessary  for 
certification.  FAI  does  not  provide  a  specific  curriculum  for  training  and  DAU  IT 
certification  lacks  mandatory  program  management  functional  training. 

1.  DAU  IT  vs.  FAI  IT  PM  Certification  Standards 

FAI  requires  program  managers  seeking  core-plus  specialty  in  IT  acquisitions  be 
certified  as  mid-level  program  managers.  PMs  are  also  required  to  have  at  least  two 
years’  experience  in  managing  IT  programs  or  projects.  There  are  two  certification  levels 
for  IT  PMs:  mid  and  senior.  PMs  that  manage  major  IT  investments  will  hold  the  senior 
level  IT  specialty.  The  certification  requirements  for  entry-,  mid-,  and  senior-level  PM 
are  listed  in  Table  1.  In  addition  to  program  management  entry-  and  mid- level 
competencies,  PMs  must  achieve  IT  core-plus  competencies  prior  to  being  granted 
PM  core-plus  IT  specialization  or  IT  PM  certification.  To  be  certified  as  entry,  mid, 
and  senior  level,  FAI  requires  program  managers  to  demonstrate  seven  core  PM 
competencies.  The  competencies  required  are:  (I)  Requirements  Development  and 
Management  Processes,  (2)  Systems  Engineering,  (3)  Test  and  Evaluation,  (4)  Eife 
Cycle  Eogistics,  (5)  Contracting,  (6)  Business,  Cost  and  Einancial  Management,  and 
(7)  Eeadership.  Each  of  these  core  competencies  ensure  program  and  project  managers 
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possess  the  common  skills  and  experience  necessary  to  excel  in  the  PM  functional  area. 
The  competencies  for  IT-specialization  are  listed  in  Table  2.  The  majority  apply  to  the 
senior-level  position.  As  stated  earlier,  two  years  of  experience  is  required  to  manage  IT 
programs  or  projects.  At  a  minimum,  the  experience  must  include  the  following:  the 
identification  of  IT  system  requirements;  the  use  or  knowledge  and  familiarity  of  modular 
development  methodologies;  system  integration  into  an  Enterprise  Architecture;  and  IT 
system  testing  and  evaluation.  FAI  does  not  provide  a  specific  curriculum  for  training. 
Training  vendors  are  given  the  flexibility  to  tailor  their  instructional  methods  to  deliver 
learning  outcomes  that  align  to  the  core  competencies.  FAI  accepts  training  from  multiple 
sources.  These  include  industry  training  vendors,  colleges  and  universities,  and  federal 
training  institutions  and  academies.  A  list  of  providers  offering  PM  certification  training 
can  be  found  on  www.FAI.gov.  The  sources  are  updates  periodically. 

According  to  DAU,  civilians  seeking  certification  in  the  IT  acquisition  career 
field  can  do  so  with  no  prior  program  management  experience.  Civilians  can  take  two 
courses,  have  one  year  of  IT  experience,  and  meet  the  Fevel  I  IT  requirement.  Military 
officers  assessed  in  the  acquisition  workforce  are  offered  five  career  fields  with  program 
management  and  contracting  being  the  most  preferred.  Officers  are  highly  discouraged 
from  applying  for  other  DAU  certifications  until  Fevel  3  of  their  functional  area  is 
achieved.  The  three  certification  levels  for  IT  acquisitions  are  Fevel  1,  Fevel  2,  and  Fevel 
3.  The  certification  requirement  for  each  level  is  listed  in  Tables  3,  5  and  7.  DAU  has  a 
core -plus  development  guide  that  offers  optional  courses  to  obtain  additional  knowledge, 
skills,  and  abilities.  Providing  courses  that  are  “mandatory”  ensures  that  program  and 
project  managers  possess  the  common  skill  and  experience  necessary  for  successful 
performance.  Providing  courses  that  are  “optional”  permit  skill  and  experience  to  go 
undeveloped  and,  consequently,  contribute  to  poor  program  and/or  project  management. 
DAU  core-plus  training  for  IT  covers  the  same  program  management  competencies  as 
FAI  throughout  three  levels.  Feadership  is  covered  during  Fevel  3.  As  stated  earlier, 
leadership  is  the  most  important  skill  when  managing  a  program  or  project  and  should  be 
introduced  at  Fevel  1 — ^not  Fevel  3.  DAU  does  not  have  a  published  competency 
guideline  to  indicate  what  general  and  technical  competencies  need  to  be  demonstrated 
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before  obtaining  the  next  level  of  eertifioation.  DAU’s  eore  oertifieation  standards  are 
geared  toward  meeting  training  and  experienee  objeetives.  DAU  does  not  speeify  what 
type  of  IT  aequisition  experienee  is  required  to  meet  the  eertifieation  standard  for  any 
level.  This  shorteoming  is  another  area  that  ean  go  uneheeked.  Some  DAU  eore-plus 
training  requires  a  formal  edueation;  whereas,  FAI  has  no  sueh  requirement  on  any  of  its 
PM  eourses.  This  defieieney  ean  be  seen  as  another  reason  for  poor  performing  IT 
programs  or  projeets  within  DOD. 

2,  DAU  IT  vs.  Non-IT  PM  Certification 

The  IT  PM  eore  eertifieation  standards  laek  the  mandatory  PM  training  neeessary 
to  sueeeed  at  managing  IT  programs  and  projeets.  The  training  that  provides  knowledge, 
skill,  and  experienee  for  managing  programs  and  projeets  is  not  required  in  order  to 
aehieve  a  Level  3  eertifieation.  The  IT  eore  eertifieation  standard  should  inelude  more 
mandatory  training  that  would  prepare  an  IT  PM  to  take  on  an  IT  projeet  and  have  more 
than  just  the  fundamentals  of  aequisition  management.  When  analyzing  the  program 
management  eertifieation  standards,  the  proeess  ensures  that  if  some  eore-plus  training  is 
missed,  the  training  beeomes  mandatory  before  eertifying  to  the  next  level.  Take 
contraeting  for  example.  The  training  is  eonsidered  optional  for  Level  1  eertifieation,  but 
it  is  mandatory  for  Level  2.  Developing  the  knowledge,  skill,  and  experienee  in  this  field 
eontributes  tremendously  to  ensuring  IT  requirements  are  well-written.  IT  PMs  with 
eontraeting  experienee  are  better  equipped  to  help  translate  business  and  teehnieal 
requirements  into  a  statement  of  work  that  ean  help  ensure  a  smooth  proeurement. 
Additionally,  a  well-written  eontraet  eould  aeeommodate  the  rapid  ehange  in  teehnology 
and  not  require  a  eontraet  modifieation  later  in  the  program.  The  only  time  eontraeting  is 
offered  to  the  IT  PM  is  during  Level  1  optional  training.  Information  Assuranee  (lA) — 
now  known  as  Cyberseeurity — is  offered  as  optional  training  for  IT  PM  Level  2.  This 
training  should  be  part  of  the  eore  eertifieation  standards  for  IT  PM  Level  1 .  It  is  offered 
as  optional  training  for  PM  Level  1.  lA  is  important  beeause  PMs  must  ensure  lA 
requirements  are  identified  and  ineluded  throughout  a  system’s  life  eyele.  The  DAU  IT 
PM  eore  eertifieation  standards  laek  the  mandatory  PM  training  neeessary.  This  leaves  IT 
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PMs  with  inadequate  skill  and  experienee  neeessary  for  managing  sueeessful  IT 
programs  and  projeets. 


D,  CYBERSECURITY/INFORMATION  ASSURANCE  (lA) 
CERTIFICATION 

Nothing  separates  an  IT  PM  from  a  non-IT  PM  with  respeet  to  eyberseeurity.  A 
PM  running  a  Major  Defense  Aequisition  Program  (MDAP)  will  have  to  meet  the  same 
eyberseeurity  requirements  as  an  IT  PM  in-eharge  of  a  Major  Automated  Information 
Systems  (MAIS)  program.  As  stated  in  Chapter  III,  all  program  managers  must  ensure 
eyberseeurity  requirements  are  identified  and  ineluded  throughout  the  life  eyele  of  a 
system.  Aeeording  to  DODI  8500.01,  aequisition  personnel  with  IT  development 
responsibilities  shall  be  lA-qualified  in  aeeordanee  with  DOD  8570.0 1-M,  the  lA 
Workforee  Improvement  Program.  The  lA  Management  (lAM)  eategory  is  the  logieal 
position  to  apply  for  a  PM.  This  position  is  eonsidered  to  be  the  baseline  for  DOD 
requirements.  A  PM  ean  obtain  three  levels  of  lAM.  Onee  assigned  to  a  position,  a  PM 
has  six  months  to  aehieve  the  appropriate  eertifieation  for  that  level.  Program  managers 
in  the  lAM  eategory  must  remain  eertified  during  their  time  in  that  position  or  risk  losing 
their  eertifieation  status. 

As  of  Mareh  14,  2014,  Information  Assuranee  has  been  renamed  to 
eyberseeurity.  The  term  “eyberseeurity”  has  been  adopted  from  the  National  Seeurity 
Presidential  Direetive-54/Homeland  Seeurity  Presidential  Direetive-23  and  is  to  be  used 
throughout  DOD  instead  of  the  term  “information  assuranee  (lA).” 
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V.  CONCLUSION 


A.  SUMMARY 

The  primary  objective  of  this  thesis  was  to  explore  the  differences  between  IT 
program  management  and  non-IT  program  management  through  the  analysis  of  three 
categories:  competencies,  certifications,  and  regulatory  guidelines  and  policies.  The  first 
area  analyzed  was  the  general  and  technical  competencies  listed  in  the  IT  program 
management  competency  model.  The  technical  competency  model  revealed  more 
common  program  management  knowledge  and  skill  than  technical  skill.  This  made  the 
general  competency  model  more  important  when  managing  an  IT  program  or  project. 
The  second  area  analyzed  was  the  certification  curriculum  provided  by  DAU  and  FAI  for 
IT  PMs.  DAU  and  FAI  share  similarities  and  differences  in  developing  and  strengthening 
IT  PMs,  but  FAI  requires  a  more  demanding  prerequisite  by  concentrating  on  the  seven 
core  program  management  competencies.  The  last  area  analyzed  was  the  regulatory 
guidelines  and  policies  for  the  acquisition  and  management  of  IT  systems.  Three  of  the 
guidelines  directly  relate  to  IT  program  management,  while  the  remaining  policies  focus 
on  the  acquisition  and  management  of  IT  systems.  Based  on  the  results  of  the  three 
categories  analyzed,  more  similarities  than  differences  exist  between  IT  and  non-IT 
program  management.  Each  category  requires  the  same  knowledge  and  skill  of 
fundamental  program  management  principles.  A  program  manager  who  can  combine  the 
fundamental  principles — cost,  schedule,  and  scope  management — with  interpersonal 
skills — leadership,  communication,  influencing,  negotiating,  conflict  management,  and 
team  building — seems  to  more  effectively  manage  any  program  or  project. 

Managing  the  acquisition  of  IT  systems  continues  to  be  a  challenge  for  the  federal 
government  every  year.  Although  0MB  has  launched  several  initiatives  to  improve  the 
management  and  oversight  of  IT  acquisitions,  there  is  still  room  for  improvement. 
Creating  a  specialized  career  path  and  competency  model  for  IT  PMs  was  a  great  start, 
but  the  focus  should  be  on  developing  and  strengthening  general  competencies  for  all 
program  managers.  Numerous  organizations  train  program  managers  on  the  technical  and 
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managerial  competencies  of  program  management,  but  what  training  exists  with  focus  on 
developing  and  strengthening  general  competencies? 


B,  RECOMMENDATIONS  FOR  FURTHER  STUDY 

As  shown  in  this  research,  a  program  manager  can  successfully  manage  an  IT 
program  or  project  by  combining  program  management  knowledge  and  skills  with 
interpersonal  skills.  Future  research  could  explore  the  DAU  and  FAI  courses  currently 
available  that  provide  training  on  developing  the  general  competencies  listed  in  the  IT 
program  management  competency  model.  If  no  courses  exist,  research  could  determine 
what  additional  training  could  be  implemented  to  develop  the  general  competencies  of 
program  managers. 
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